Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          LNhu2UMiskD4K9fAwbtM37tcw4HnVi8yRBuJaBJAS8o=
Subject key identifier:   38:F9:2F:71:5E:73:60:CA:77:2C:EF:11:5C:C5:02:71:46:BA:5A:B7
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          01ED
Signing time:             Wed 29 Jul 2026 04:32:10 +0000
Manifest this update:     Wed 29 Jul 2026 04:32:10 +0000
Manifest next update:     Wed 05 Aug 2026 04:32:10 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: SVpF5fFNBGrw0mNZhDIUdfQisWm9iO1kraOVKGdv6ps=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Jul 29 04:32:10 2026 GMT
            Not After : Aug  5 04:32:10 2026 GMT
        Subject: CN=6a69824a-49b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:50:b4:71:e0:47:03:52:73:f0:a7:ef:c7:
                    7d:8d:9f:eb:b0:f1:42:d7:3b:93:d4:cb:cf:8f:07:
                    6a:9f:ee:f5:36:d4:18:3b:f8:ed:38:36:8b:03:69:
                    4a:48:32:83:09:76:c6:82:8a:e2:8e:09:2b:76:e9:
                    cd:76:84:4b:ed:41:0f:51:76:12:ee:29:c2:e5:8d:
                    e9:ea:09:01:c8:5f:fe:ae:48:b3:b4:09:df:b3:76:
                    d2:81:bc:33:60:1d:92:8e:12:3a:34:56:81:a1:b1:
                    55:8e:03:af:31:a7:8f:4e:aa:20:7f:d7:87:57:0c:
                    e6:4e:b7:39:d5:23:61:e0:3f:8d:ef:b6:e2:9b:8e:
                    84:ab:21:d0:98:f1:c6:d7:6c:b6:03:30:67:70:73:
                    e6:16:14:e3:86:83:da:60:cd:6b:ea:50:f6:d0:c7:
                    47:cf:49:e9:a3:5a:87:7e:87:c8:71:03:ae:92:99:
                    11:81:cb:53:5d:f0:08:c7:bf:1b:28:ff:dc:a8:97:
                    78:49:3b:ea:75:c2:87:af:b0:95:b1:30:c5:37:38:
                    28:5c:3f:b7:1e:16:ed:e7:0b:1c:7a:c5:ac:0b:c6:
                    fe:2d:8f:7c:c6:4b:61:29:96:5e:09:86:9d:f6:68:
                    92:1e:e9:09:70:42:19:68:d4:f4:8c:95:5b:f7:b3:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F9:2F:71:5E:73:60:CA:77:2C:EF:11:5C:C5:02:71:46:BA:5A:B7
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:3d:0e:cc:61:72:cb:ac:44:d9:17:89:1f:db:25:1b:9f:
         c0:c0:56:6f:22:f5:11:86:a5:00:81:c2:db:5a:3a:3d:79:69:
         96:f8:19:93:a0:51:a7:bb:c4:33:da:e8:b1:9d:88:cd:e3:8c:
         cf:47:f4:53:9e:d6:e8:2e:3d:0a:c6:25:a7:19:33:59:53:b3:
         05:6f:90:06:54:34:68:e1:ff:2d:a2:da:05:2e:0d:8c:31:51:
         85:eb:5f:b5:62:5c:08:6e:c0:b4:ea:d1:9b:40:a3:3a:0f:1f:
         c4:12:fd:ae:b0:9d:53:99:a0:35:25:45:a3:cc:e8:85:95:44:
         68:de:7e:77:64:e8:f7:ec:d3:db:84:e7:23:c3:cb:f0:04:6b:
         da:e1:ec:cf:a6:30:dc:b6:ee:2c:48:aa:60:ce:49:88:c5:e3:
         6e:78:0e:a2:4f:d0:0a:f0:fa:9c:37:83:24:ed:ab:ba:b3:5b:
         32:d8:9e:c6:3e:39:12:d2:df:63:09:5e:a9:84:c3:85:4d:52:
         78:f4:11:d0:d5:04:9b:3b:7b:28:2e:eb:62:bc:ed:7b:ae:1b:
         f8:12:e0:1f:69:86:c0:5c:75:36:fe:dc:4f:29:f5:c0:5c:56:
         00:d9:75:c4:c9:bb:a4:fc:9d:b5:68:24:65:31:56:a3:5e:4a:
         57:00:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:42 2026 by rpki-client